PT-2022-22209 · Wavlink · Wavlink Wn579X3

Penwei Huang · Published 2022-07-25 · Updated 2023-08-08 · CVE-2022-34570

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WAVLINK WN579 X3 version M79X3.V5030.191012

Description The issue allows attackers to obtain key information by accessing the "messages.txt" page, resulting in an information leak.

Recommendations For version M79X3.V5030.191012, consider restricting access to the "messages.txt" page until a fix is available.

Exploit

Fix

Insertion into Log File

Weakness Enumeration

CWE-425

CWE-532

Related Identifiers

CVE-2022-34570

Affected Products

Wavlink Wn579X3

References · 5

• 🔥 https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20WN579%20X3__messages.md · Exploit
• https://wavlink.com/en_us/product/WL-WN579X3.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34570 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34570 · Vendor Advisory
• https://t.me/cvenotify/33842 · Telegram Post